diff --git a/dnet_user_services_perms/tasks/dnet-groups.yml b/dnet_user_services_perms/tasks/dnet-groups.yml
index 6894baf8..4fae928b 100644
--- a/dnet_user_services_perms/tasks/dnet-groups.yml
+++ b/dnet_user_services_perms/tasks/dnet-groups.yml
@@ -1,7 +1,9 @@
 ---
 - name: Create the dnet user, if it is not used to run the tomcat instances
   user: name={{ dnet_user }} home={{ dnet_data_directory }} createhome=no shell=/bin/false
-  when: dnet_user != dnet_tomcat_user
+  when:
+    - dnet_tomcat_user is defined
+    - dnet_user != dnet_tomcat_user
   tags: [ 'dnet', 'users' ]
 
 - name: Add the dnet groups, if it does not exist already